Everything Vector Bulletin has reported about authentication bypass: 4 stories, newest first. Part of our Vulnerabilities coverage.
Progress has released updates for its managed file transfer platform to address twelve vulnerabilities, including critical flaws that enable authentication bypass and privilege escalation.
Unauthenticated attackers can hijack accounts in Better Auth versions before 1.7.7 by exploiting a flaw in the OAuth Proxy plugin that permits profile forgery.
A TLS configuration error disables authentication globally in HAProxy Data Plane API, allowing unauthenticated access to administrative controls.
A critical flaw in Integrics Enswitch permits attackers to reset user passwords without credentials, enabling full account takeover through username enumeration.